I am seeing Password Manager Metadata in keychain all of a sudden.

Is "Password Manager Metadata" in my keychain normal?


MacBook Air 13″

Posted on Oct 25, 2023 2:28 PM

Reply
Question marked as Top-ranking reply

Posted on Jul 1, 2024 10:11 AM

I can explain that:


  • Mac OS X has had Keychain Access.app for many many years.
  • macOS 13 Ventura introduced the system settings pane "Passwords".


Seemingly that are just two different GUIs for accessing the same backend, which seemingly is called keychain services API.


Per a record some data-fields are shared while others are only accessible by the respective GUI:

  1. Shared — They are centrally stored and can be read/written by both Keychain Access.app and Passwords pane.
  2. Keychain Access.app only — The value of the "Comments" field in the Keychain Access.app is stored in the main record.
  3. Passwords pane only — If you fill the "Notes" field the value is NOT stored in the main record in the "Comments" field (although semantically the same as the "Comments" field IMHO) but instead it creates a supplemental record, with the name pattern "Password Manager Metadata: domain.com (username@mailservice.com)".








3 replies
Question marked as Top-ranking reply

Jul 1, 2024 10:11 AM in response to jeffnudi

I can explain that:


  • Mac OS X has had Keychain Access.app for many many years.
  • macOS 13 Ventura introduced the system settings pane "Passwords".


Seemingly that are just two different GUIs for accessing the same backend, which seemingly is called keychain services API.


Per a record some data-fields are shared while others are only accessible by the respective GUI:

  1. Shared — They are centrally stored and can be read/written by both Keychain Access.app and Passwords pane.
  2. Keychain Access.app only — The value of the "Comments" field in the Keychain Access.app is stored in the main record.
  3. Passwords pane only — If you fill the "Notes" field the value is NOT stored in the main record in the "Comments" field (although semantically the same as the "Comments" field IMHO) but instead it creates a supplemental record, with the name pattern "Password Manager Metadata: domain.com (username@mailservice.com)".








Jul 1, 2024 10:39 AM in response to abitofmind

1) Could anyone please verify/falsify my explanation that for those supplemental "Password Manager Metadata: …" records that show up in Keychain Access.app, one indeed can remember having added a "Notes" field to the corresponding domain/username record in the "Passwords" settings pane?


2) Another interesting observation (a sloppy/buggy implementation by Apple if you ask me): If you then later clear the "Notes" field in the "Passwords" settings pane, that supplemental metadata entry nevertheless still remains. Although it there is no more metadata. Here Apple forgot to also properly delete that supplemental metadata entry if it carries no more metadata. A lot of bogus/orphaned metadata entries (which technically just carry a Notes="" NULL entry) will accumulate over time. Really sloppy implementation!

Jul 28, 2024 1:30 PM in response to jeffnudi

I followed this with interest. I have an issue I cannot solve.

I somehow got a password labeled "Password Manager Metadata(<<a bunch of letters>>)" in my keychain for "app.convertkit.com," and I don't know how to use it.

I'm locked out of my account, and there's no way (that I can find) to contact their customer service team (no email, no number, nothing).


If anyone has any ideas, please share them.

thanks,

Kim


This thread has been closed by the system or the community team. You may vote for any posts you find helpful, or search the Community for additional answers.

I am seeing Password Manager Metadata in keychain all of a sudden.

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple Account.